Skip to content
Noroxi

File Sharing & Download Manager – User Private Files

user-private-files · plugin

Known security vulnerabilities for File Sharing & Download Manager – User Private Files. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

1 with public exploit code · latest Jun 16, 2026

Vulnerabilities

  • CVE-2024-7848

    User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access

    Medium 6.5

  • CVE-2026-10093

    File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameter

    Medium 6.4

  • CVE-2024-13799

    User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2023-4636

    WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

    Medium 4.8

← Back to directory